[BUG]: AdvancedSecurity-Codeql-Init (403s Getting Latest Release Details)

[kevinwedwards]

New issue checklist

• I searched for existing GitHub issues
• I read pipeline troubleshooting guide
• I checked how to collect logs

Task name

AdvancedSecurity-Codeql-Init

Task version

1.1.337

Issue Description

Getting 403s (potential throttling by github?) when trying to run: Advanced Security Initialize CodeQL
Seems similar to #21553

This is on an Angular/TypScript codebase.

Environment type (Please select at least one enviroment where you face this issue)

• Self-Hosted
• Microsoft Hosted
• VMSS Pool
• Container

Azure DevOps Server type

dev.azure.com (formerly visualstudio.com)

Azure DevOps Server Version (if applicable)

No response

Operation system

Windows Server 2019 Datacenter

Relevant log output

Starting: Advanced Security: Initialize 🛡

Task         : Advanced Security Initialize CodeQL
Description  : Initializes the CodeQL database in preparation for building.
Version      : 1.1.337
Author       : Microsoft Corporation
Help         : https://aka.ms/advancedsecurity/code-scanning/detection

Session Id=dd87d399-ca5f-4889-bf9b-ba1b026f7867
Starting CodeQL automatic detection and installation.
CodeQL Detection and Installation
Getting Latest Release Details
##[warning] Request failed with status code 403
Install and Setup CodeQL tools
##[warning] Failed to retrieve Release Details from Internal API
##[error]Failed to retrieve Release Details from Internal API

Learn more about the scan for the CodeQL build tasks:
https://aka.ms/advanced-security/code-scanning/detection

Finishing: Advanced Security: Initialize 🛡

Full task logs with system.debug enabled

Details

##[debug]System.CollectionUri=https://dev.azure.com/[*redacted*]/
##[debug]SYSTEMVSSCONNECTION auth param ACCESSTOKEN = ***
##[debug]SYSTEMVSSCONNECTION auth param ACCESSTOKEN = ***
##[warning] Request failed with status code 403
Install and Setup CodeQL tools
##[warning] Failed to retrieve Release Details from Internal API
##[debug]task result: Failed
##[error]Failed to retrieve Release Details from Internal API
##[debug]Processed: ##vso[task.issue type=error;]Failed to retrieve Release Details from Internal API
##[debug]Processed: ##vso[task.complete result=Failed;]Failed to retrieve Release Details from Internal API

Repro steps

# Init security scans 
      - task: AdvancedSecurity-Codeql-Init@1.1.337
        displayName: 'Advanced Security: Initialize 🛡'
        condition: eq(variables['Build.SourceBranch'], 'refs/heads/main')
        inputs:
          enableAutomaticCodeQLInstall: true
          languages: 'javascript'
          buildtype: 'None'
          querysuite: security-extended
          sourcesfolder: src/[**redacted**]

[kevinwedwards]

Unlocking version 1.1.337 and just using @1 (v.1.1.356) seems to resolve the issue.